
United States Patent and Trademark Office 



UNITED STATES DEPARTMENT OF COMMERCE 
United States Patent and Trademark Office 
Address: COMMISSIONER FOR PATENTS 
P.O. Box 1450 

Alexandria, Virginia 22313-1450 
www.uspto.gov 



APPLICATION NO. 


FILING DATE | 


FIRST NAMED INVENTOR 


ATTORNEY DOCKET NO. 


CONFIRMATION NO. 


10/643,864 


08/20/2003 


Masayuki Nakae 


8046-1041 


5195 



YOUNG & THOMPSON 
745 SOUTH 23RD STREET 
2ND FLOOR 
ARLINGTON, VA 22202 



EXAMINER 



BROWN, CHRISTOPHER J 



ART UNIT 



PAPER NUMBER 



2134 



SHORTENED STATUTORY PERIOD OF RESPONSE 



MAIL DATE 



DELIVERY MODE 



31 DAYS 04/03/2007 PAPER 

Please find below and/or attached an Office communication concerning this application or proceeding. 

If NO period for reply is specified above, the maximum statutory period will apply and will expire 6 MONTHS 
from the mailing date of this communication. 



PTOL-90A (Rev. 10/06) 



Office Action Summary 


Application No. 

10/643,864 


Applicant(s) 
NAKAE ET AL 


examiner 

Christopher J. Brown 


Art Unit 

2134 





The MAILING DATE of this communication appears on the cover sheet with the correspondence address - 
Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 1 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1)^ Responsive to communication(s) filed on 07 October 2005 . 
2a)D This action is FINAL. 2b)D This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) 0 Claim(s) 1-112 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) D Claim(s) is/are rejected. 

7) D Claim(s) is/are objected to. 

8) E3 Claim(s) 1-112 are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) D The drawing(s) filed on is/are: a)Q accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

1 1) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 
a)D All b)D Some * c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

2. D Certified copies of the priority documents have been received in Application No. . 

3. D Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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Election/Restrictions 

Restriction to one of the following inventions is required under 35 U.S.C. 121 : 

I. Claims 1-13, 59, drawn to a method, system and program for defending against an 
attack using a firewall, and a decoy device, based on header information from an 
IP packet , classified in class 726, subclass 22. 

II. Claims 14-29,60, 61,62,64,71-80, 103-104, 107, 109-1 12 drawn to a method, 
system and program for defending against an attack using a firewall, and a decoy 
device, based on confidence levels and an IP source, classified in class 713, 
subclass 166. 

III. Claims 30-36, 66 drawn to a method, system and program for defending against 
an attack using a firewall, and a decoy device, using a first and second destination 
selector and a plurality of IP packets, classified in class 713, subclass 160. 

IV. Claims 37-48, 63, 65, 87, 94-97 drawn to a method, system and program for 
defending against an attack using a firewall, and a decoy device, using including 
detecting the presences or absence of an attack by executing a service process 
classified in class 726, subclass 23 

V. Claims 49-58 drawn to a method, system and program for defending against an 
attack using a firewall, and a decoy device, using including using a distribution 
condition, classified in class 713, subclass 162. 

VI. Claims 67, 81, 91, 93 are drawn to a method, system and program for defending 
against an attack using a decoy device, including an event memory for 
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temporarily storing events and an event manager for analyzing cause-effect 
relations classified in class 726, subclass 25. 

VII. Claims 68-70, 82-86, 92, 93 drawn to a method, system and program for 
defending against an attack using a decoy device, including a domain constraint, 
classified in class 726, subclass 11. 

VIII. Claims 98-100, drawn to a method, system and program for defending against an 
attack using a firewall, and a decoy device, using a condition generator to 
generate a condition based on an attack category, and dynamically updating said 
condition classified in class 713, subclass 100. 

IX. Claims 101, 105 drawn to a method, system and program for defending against an 
attack using a firewall, and a decoy device, using a plurality of decoys, as 
classified in class 713, subclass 189. 
X. Claims 102, 106, 108 drawn to a method, system and program for defending 
against an attack using a firewall, and a decoy device, using an alert with at least 
an attack source IP address and an attack target IP address, condition classified in 
class 726, subclass 13. 
Inventions I-X are related as subcombinations disclosed as usable together in a single 
combination. The subcombinations are distinct from each other if they are shown to be 
separately usable. See MPEP § 806.05(d).The inventions are distinct, each from the other 
because of the following reasons: 
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Because these inventions are distinct for the reasons given above and have acquired a 
separate status in the art as shown by their different classification, restriction for examination 
purposes as indicated is proper. 

Because these inventions are distinct for the reasons given above and the search required 
for any one Group is not required for any other Group, restriction for examination purposes as 
indicated is proper. 

Because these inventions are distinct for the reasons given above and have acquired a 
separate status in the art because of their recognized divergent subject matter, restriction for 
examination purposes as indicated is proper. 

Applicant is reminded that upon the cancellation of claims to a non-elected invention, the 
inventorship must be amended in compliance with 37 CFR 1 .48(b) if one or more of the 
currently named inventors is no longer an inventor of at least one claim remaining in the 
application. Any amendment of inventorship must be accompanied by a request under 37 CFR 
1 .48(b) and by the fee required under 37 CFR 1 . 1 7(i). 

Applicant is advised that the reply to this requirement to be complete must include an 
election of the invention to be examined even though the requirement be traversed (37 CFR 
1.143). 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Christopher J. Brown whose telephone number is (571)272-3833. 
The examiner can normally be reached on 8:30-6:00. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kambiz Zand can be reached on (571)272-381 1 . The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

Christopher Brown 3/3 1/07 . 





